medium5.0Public exploit code
CVE-1999-0173
FormMail CGI program can be used by web servers other than the host server that the program resides on.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Matt Wright FormMail 1.x - Cross-Site Request Forgery1997-01-01 · remote · unix · Verified
Impact
FormMail CGI program can be used by web servers other than the host server that the program resides on.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matt Wright | Formmail | All versions |